Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About otman01
otman01
Communicator
Member since:
02-27-2015
06-05-2020
Community Statistics
| Posts | 77 |
| Solutions | 4 |
| Karma Given | 1 |
| Karma Received | 12 |
| Member Since | 02-27-2015 |
Activity Feed
- Karma Re: How to reuse the count from a previous search to calculate a percentage in a second search or combine the two searches? for chimell. 06-05-2020 12:47 AM
- Got Karma for How to reuse the count from a previous search to calculate a percentage in a second search or combine the two searches?. 06-05-2020 12:47 AM
- Got Karma for How to add custom icons in a javascript file to use in a table based on returned results?. 06-05-2020 12:47 AM
- Got Karma for Splunk DB Connect 2: Why am I getting error "No catalog found" when I click on the query tab?. 06-05-2020 12:47 AM
- Got Karma for Splunk DB Connect 2: Why am I getting error "No catalog found" when I click on the query tab?. 06-05-2020 12:47 AM
- Got Karma for Splunk DB Connect 2: Why am I getting error "No catalog found" when I click on the query tab?. 06-05-2020 12:47 AM
- Got Karma for Display a result when the count =0. 06-05-2020 12:47 AM
- Got Karma for How to configure Splunk to send alert emails from my Gmail account?. 06-05-2020 12:47 AM
- Got Karma for Re: How do I convert the time in my table to a human readable date format?. 06-05-2020 12:47 AM
- Got Karma for How to split multiple lines of data into individual lines?. 06-05-2020 12:47 AM
- Got Karma for How to split multiple lines of data into individual lines?. 06-05-2020 12:47 AM
- Got Karma for How to split multiple lines of data into individual lines?. 06-05-2020 12:47 AM
- Got Karma for Re: DBConnect stopped functioning. 06-05-2020 12:46 AM
- Posted Re: DBConnect stopped functioning on All Apps and Add-ons. 06-29-2017 12:38 AM
- Posted Re: Splunk DB Connect 2: Why am I getting error "No catalog found" when I click on the query tab? on All Apps and Add-ons. 10-26-2015 01:17 AM
- Posted Re: How do I convert the time in my table to a human readable date format? on Splunk Search. 08-18-2015 06:27 AM
- Posted Re: How do I convert the time in my table to a human readable date format? on Splunk Search. 08-18-2015 06:13 AM
- Posted How do I convert the time in my table to a human readable date format? on Splunk Search. 08-18-2015 04:28 AM
- Tagged How do I convert the time in my table to a human readable date format? on Splunk Search. 08-18-2015 04:28 AM
- Posted Re: Splunk DB Connect: The Java Bridge server is not running on All Apps and Add-ons. 08-14-2015 12:55 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 3 | |||
| 0 | |||
| 0 | |||
| 3 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 |
04-16-2015
02:18 AM
this is my search query
source="WinEventLog:*" | stats count by EventType
this is the resul of the search
EventType count
0 --------------21
2 --------------11
3 ---------------1
4 --------------22
What I want is to display 2 other envents that are not listed in the result
EventType1 and EventType5
Thank you
... View more
04-16-2015
01:20 AM
1 Karma
Hi every one,
Whene I use the command count with Stats or chart, the result display just the events when count is greater than 0.
In my case I want to display 0 if the count = 0.
It is possible ?
Thank you for your help have a nice day 🙂
... View more
04-15-2015
08:14 AM
I tried the example it works .
Thank you Baerts
... View more
04-13-2015
05:17 AM
Thank you for your response 🙂
I will try this
... View more
04-13-2015
02:11 AM
1 Karma
Hi everybody,
I want to add icons in a table, and I want to know if we could add custom icons in a js file ????? like : icon-power, icon-battery-1, icon-closethick .... present in this page
http://api.jqueryui.com/theming/icons/
I couldn't find how to process 😞
Thank you for your answer.
... View more
04-10-2015
07:42 AM
Yes its a good example. But can we add another icons ????? like
icon-power, icon-battery-1, icon-closethick .... present in this page
http://api.jqueryui.com/theming/icons/
Thank you for your answer.
... View more
04-07-2015
02:50 AM
Thank you I could find another solution, for my case I use WHERE expression to extrat just one line
... View more
04-07-2015
01:08 AM
Thank you for your answer.
so this is an extrat of the result that the search return:
EventType--------nombre ------------------- percentage
0------------------- 8246 ----------------------- 14.43
1 ------------------- 18 --------------------------- 0.03
2 ------------------- 7512 ----------------------- 13.15
3 ------------------- 3982 ------------------------ 6.97
4 ------------------- 37286 ---------------------- 65.25
5 ------------------- 101 -------------------------- 0.18
What I want to do is extract for example the 2nd row and the 4th row .
Is this is POSSIBLE ?
... View more
04-03-2015
06:31 AM
Yes EventType is a field for me there are a values that it accept (0.1.2.3.4.5.6)
thank you
... View more
04-03-2015
05:49 AM
I have some problems in the 2 searchs. can you help me ? thank you
"Error in 'chart' command: The argument '( ( EventType=0 AND count=7957 ) )' is invalid."
this is exactely the first search:
source="WinEventLog:*" | chart count AS result
this is the second:
search source="WinEventLog:*" EventType=0 | chart count by EventType
in the general search I do like bellow (it works to give me the percentage)
source="WinEventLog:*" | chart count as nombre by EventType | eventstats sum(nombre) as total | eval percentage=round((nombre/total)*100,2) | table EventType, nombre, percentage
but I want to keep each row in a separate panel .
... View more
04-03-2015
12:56 AM
1 Karma
Hi,
I want to create a dashboard using these 2 searches:
1) the first one index='text' | count , will give a result. For example result=250
2) the second one will be based on the result of the first one
index='text' type='cpu'| eventstats sum(nombre) as total | eval pourcentage=round((nombre/result)*100,2) | table EventType, nombre, pourcentage
Do you have an idea how to do this?
Thank you all, have a nice day
... View more
04-01-2015
08:43 AM
I need to do the same thing . thank you for your responses.
have a nice day
... View more
03-31-2015
04:42 AM
I resolve the problem.
if any one need to make the same exemple, you can find the answer in this page .
http://answers.splunk.com/answers/177749/change-field-value-font-color-in-a-table.html
... View more
03-31-2015
04:21 AM
Hi, every one
can we make this kind of test:
if (field=="OK")
Please if you have some ideas to resolve that, forward the answer
thank you
... View more
03-19-2015
01:56 AM
Gyslainlatsa , Schose,
Thank you for your answers , it works 🙂 .
Have a nice day
... View more
03-17-2015
02:15 AM
Hi, I’m a student and my intership project is focused on splunk to collect data ana make some analyses an some repports.
Now I want to export an old projet from splunk server, and import it in an other ionstance of splunk. other way , I have two instances for Splunk the first for testing environement and the seconde is for product environement, and I want to clone all the application that was already developped in the testing environement and make it it turn in product environement.
I maked some searchs in Internet but I didn’t fine something that explain clearly how to process. If you have somme ideas, Thank you for answering . ( sorry my English is not very well 🙂 )
Best regards.
... View more
03-05-2015
07:03 AM
this is the code predented in the script file: if you have same marks!!! thank you ( I'm on windows os)
!/bin/bash
Author: Nimish Doshi
Use for scripted alerts to control how and when email is sent.
Modify the Script or the corresponding python code to reflect your usage.
SPLUNK_HOME="/Applications/splunk"
Set to Daily, Weekend, or Weekday (Weekday = Monday to Friday)
export mailDay="Daily"
export mailFrom="[email protected]"
export mailTo="[email protected]"
export mailSubject="Splunk Email Alert"
Set to your mail host gateway that receives mail
export mailHost="smtp.gmail.com:465"
For SMTP Authentication
export Auth="1"
export smtpuser="[email protected]"
export smptpass="*******"
python "C:\Program Files\Splunk\bin\scriptssendmailpython.py" "$1" "$2" "$3" "$4" "$5" "$6" "$7" "$8"
... View more
03-05-2015
02:56 AM
Thank you
I will try to make this configuration
... View more
03-05-2015
01:55 AM
HI every one,
1) First of all, I didn't find the application installed in the : "Splunk>Apps".
2) I want to configure the file, to send email if the alert is triggred. this is the configuration that I made:
export mailDay="Daily"
export mailFrom="[email protected]"
export mailTo="[email protected]"
export mailSubject="Splunk Email Alert"
Set to your mail host gateway that receives mail
export mailHost="smtp.company.com"
For SMTP Authentication
export Auth="0"
export smtpuser="[email protected]"
export smptpass="yyyyyy"
python $SPLUNK_HOME/bin/scripts/sendmailpython.py "$1" "$2" "$3" "$4" "$5" "$6" "$7" "$8"
But it doesn't work !!!! did i miss something?
... View more
03-05-2015
01:02 AM
Hi everyone
I have 2 questions regarding the setup of the Twilio app from the documentation (https://apps.splunk.com/app/1765/#/documentation 😞
1) Step 2 "Edit log collection scripts" talks about running the 2 scripts
$ python get_call_logs.py
$ python get_sms_logs.py
How do we run these 2 scripts?
2) Step 3 "Configure input" says we have to Replace "$SPLUNK_HOME" with the correct directory of your Splunk installation. Will it be something like: C:\Program Files\Splunk\bin\splunk.exe ?
Thank you.
... View more
03-04-2015
05:08 AM
thank you. I don't have the permission to use telnet. so I will contact the administrator to give the permisssion to use it, and the I will re-test
... View more
- « Previous
- Next »
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
Karma from
